Security Directory

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

B

BBD

brightblueday.com

53

Bright Blue Day (BBD) is a creative performance agency specializing in delivering high-impact marketing campaigns and content for Finance, SaaS, and Tech Security brands globally. Established in 2013, BBD has positioned itself as a trusted partner to major global clients such as Visa, Quintet Investment Bank, and HPE Aruba. Their service offerings include creative content, strategy and performance marketing, and platform/web development, leveraging AI-driven frameworks to accelerate personalized content delivery and lead generation. Technically, the website is built on modern web technologies including React and Next.js, hosted on AWS infrastructure, and optimized for performance and mobile responsiveness. The site employs multiple analytics and tracking tools, including Google Analytics, TikTok Pixel, and Microsoft Clarity, indicating a mature digital marketing infrastructure. Privacy and cookie policies are comprehensive and include consent mechanisms, reflecting good privacy compliance practices. From a security perspective, the site enforces HTTPS and domain registration includes protective status flags. However, DNSSEC is not enabled, and security headers could be improved. There is no explicit security policy or incident response information published, which could be a gap for enterprise clients. No vulnerabilities or exposed sensitive data were detected. Overall, BBD presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic improvements in security policy transparency and DNS security would further enhance their posture.

Scott Aerospace operates as a specialized provider of defence and maritime supply chain management and equipment support services. Their offerings include through-life equipment support, rapid procurement, engineering services, project management, and industrial equipment engineering, targeting naval and commercial fleets including the Royal Navy and international navies. The company positions itself as an accountable partner for outsourcing critical defence and marine system support. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting infrastructure, with a modern design and mobile optimization. The site uses HTTPS with HSTS enabled, but lacks additional security headers and published security policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and branding appear professional. Privacy compliance is partial, with a cookie consent banner present but no privacy or terms of service pages found. Overall, the security posture is moderate, with recommendations to improve security headers, publish privacy and security policies, and clarify domain registration status to enhance trustworthiness.

M

Mitchells Millbrook Limited

mitchellsworktops.co.uk

49

Mitchells Millbrook Limited operates a specialized retail and trade business supplying kitchen worktops and bathroom surfaces from Southampton, UK. With over 70 years of experience, they maintain a large stock and offer custom fabrication services supported by onsite workshop facilities. Their target market includes both trade professionals and retail customers primarily in the South of England. The website reflects a professional and established business with clear service offerings and local delivery capabilities. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket, ensuring good SEO and performance optimization. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and formal security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. The WHOIS data is unavailable due to a domain lookup error, which limits trust assessment from a domain registration perspective. Overall, the website is functional, professional, and trustworthy from a business and content perspective but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

The website www.thetablet.co.uk is currently inaccessible, presenting a 403 Forbidden error page indicating that access is blocked, likely by Cloudflare security mechanisms. The page contains no business content, contact information, or compliance policies, and only includes minimal styling and a Cloudflare Insights analytics beacon. The WHOIS lookup for the domain failed with an error stating the domain name contains too many parts and cannot be registered, suggesting the domain may be invalid or misconfigured. This severely limits the ability to assess the business or technical maturity of the site. The security posture is weak due to lack of accessible content and missing security headers, though the presence of Cloudflare indicates some level of protection. Overall, the site is not currently functional or trustworthy for users or business partners.

N

Northside Truck & Van Ltd

northside.co.uk

64

Northside Truck & Van Ltd is a reputable commercial vehicle dealership specializing in Mercedes-Benz and FUSO trucks and vans, primarily serving the Yorkshire region in the United Kingdom. The company offers new and used vehicle sales alongside servicing and maintenance, positioning itself as a trusted regional specialist. The website reflects a professional and consistent brand image with good content quality and user experience, targeting businesses and individuals seeking commercial vehicles. Technically, the site employs modern technologies including Google Analytics, Google Tag Manager, Osano consent management, and Vue.js, hosted via Amazon Cloudfront CDN, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. However, WHOIS data is unavailable due to domain registration issues, slightly impacting trustworthiness. Overall, the website is professional, secure, and compliant, with room for improvement in contact transparency and security documentation.

B

Betting Jobs

bettingjobs.com

72

BettingJobs is a specialized recruitment platform focused on the iGaming industry, offering job search and placement services with over 22 years of expertise. The website is professionally designed using WordPress CMS and modern web technologies, providing a good user experience and clear navigation for both job seekers and employers. The technical infrastructure includes popular libraries and frameworks such as jQuery, Bootstrap 4, and FontAwesome, with Google Analytics and Tag Manager integrated for user tracking. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the website content and presentation suggest a legitimate business. Overall, the site is safe for general audiences and does not contain adult or explicit content.

The website www.warewithall.co.uk is currently inaccessible due to a Cloudflare 520 error indicating an unknown issue between Cloudflare and the origin web server. The domain WHOIS lookup failed because the domain name is invalid per Nominet UK naming rules, suggesting the domain is either misconfigured or not legitimately registered. No business information, contact details, or policies are available on the site, and the content is limited to an error message page. The technical infrastructure relies on Cloudflare as a proxy, but the origin server is not responding correctly. Security posture is weak due to lack of visible security headers and policies. Overall, the site cannot be properly assessed due to access restrictions and lack of data, resulting in a low trust and legitimacy score.

H

HendersonGM

hendersongm.co.uk

59

Henderson Grass Machinery operates as a small regional business specializing in agricultural and horticultural engineering and machinery sales in Scotland. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic technical infrastructure. The site content is focused on providing information about their services and locations but lacks comprehensive business contact details and privacy policies. Security posture is minimal with no detected security headers or advanced configurations, and the domain WHOIS data is missing or invalid, raising concerns about domain legitimacy. Overall, the business appears functional but would benefit from improved security, privacy compliance, and clearer business information to enhance trust and professionalism.

S

Strathclyde Scaffolding Services Ltd

strathclydescaffoldingservices.co.uk

55

Strathclyde Scaffolding Services Ltd is a small, locally focused scaffolding service provider based in Argyll, United Kingdom. With over 30 years of experience, the company offers scaffolding hire, erection and dismantling services, roof coverings, and related solutions primarily targeting construction and public sector clients in the Argyll region. The website reflects a professional and consistent brand presence with clear contact information and service descriptions. Technically, the site is built on WordPress using modern plugins such as Beaver Builder and Yoast SEO, with Google Analytics and reCAPTCHA integrated for analytics and security. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS and reCAPTCHA, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and credible for its business domain but could improve compliance and security transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Spaceship

sboptical.com

60

The website www.sboptical.com is a domain-for-sale landing page hosted by the Spaceship marketplace platform. It offers the domain SbOptical.com for purchase with secure checkout and guided transfer support. The site is minimalistic, focusing solely on domain sale information without additional business or contact details. The domain WHOIS data is unavailable, indicating the domain is likely unregistered or expired, consistent with the domain being offered for sale. The technical infrastructure relies on Spaceship's CDN and standard web technologies with basic mobile optimization and SEO. Security posture is moderate due to the mention of secure checkout but lacks visible security headers or policies. Privacy and cookie policies are absent, and no contact or incident response information is provided, limiting compliance and trust. Overall, the site serves as a straightforward sales landing page with limited business credibility and technical sophistication.

C

Cross Concrete Flooring Ltd

crossconcreteflooring.com

39

Cross Concrete Flooring Ltd is a small concrete flooring service provider currently in the process of launching a new website. The company presents itself with ISO certifications (ISO 45001, ISO 9001, ISO 14001) as trust indicators and provides clear contact details including phone and email. The website is built on WordPress using a coming soon maintenance plugin, with basic design and minimal content focused on informing visitors about the upcoming site and providing contact information. Technically, the site uses modern web fonts, Font Awesome icons, and AJAX for subscription forms, indicating moderate digital maturity. However, the absence of security headers and privacy/cookie policies highlights gaps in security and compliance. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and ownership transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. No tracking or analytics services are detected, suggesting minimal user tracking. Overall, the site is safe with no adult or questionable content but requires improvements in security, privacy compliance, and domain legitimacy to enhance trust and professionalism.

L

Lillys Dog Grooming

lillysdoggroomingltd.co.uk

52

Lilly's Dog Grooming is a small business focused on providing dog grooming services, as indicated by the website title and minimal content. The website is built on the Wix platform, utilizing Wix's standard scripts and styles, indicating a basic level of technical infrastructure suitable for small businesses. The site lacks advanced SEO optimization and does not provide privacy or cookie policies, which limits its digital maturity and compliance posture. Security posture is basic with no evident security headers or advanced protections, and the domain WHOIS lookup failed due to a domain registration error, raising concerns about the legitimacy and registration status of the domain. Overall, the website presents a minimal online presence with room for improvement in compliance, security, and business credibility.

St Pauls Associates Ltd is a UK-based small real estate and architectural services company specializing in residential, commercial, student accommodation, and community projects. The company has an established online presence with a website created on the WordPress platform, featuring a modern tech stack including Bootstrap, jQuery, and GSAP. The website is moderately optimized for performance and mobile devices, with good SEO practices and structured data implemented. Security posture is adequate with HTTPS enabled and secure form submission, but lacks important security headers and privacy compliance documentation such as privacy and cookie policies. No direct contact emails or phone numbers are publicly listed, relying solely on a contact form. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Pronovotech Limited is a UK-based specialist consultancy focused on assisting technology companies in claiming R&D tax incentives. Established in 2006, the company offers a range of tailored services including full claim preparation, technical documentation support, and assistance with HMRC enquiries. The website positions Pronovotech as an independent expert with a strong relationship with HMRC and a client base spanning multiple technology sectors. The digital infrastructure is built on WordPress with modern plugins and SEO tools, hosted by JaguarPC. The site is well-structured, mobile-optimized, and provides clear navigation and contact options. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional and credible business with a strong market position in the UK R&D tax relief consulting niche.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Country Love Crafts is a UK-based small retail business specializing in supplying ready-to-decorate craft shapes and pottery materials. The company serves craft studios, hobbyists, and pottery businesses with a broad product range including bisque blanks, clay, glazes, kilns, and decorating supplies. They operate an e-commerce platform powered by Odoo and maintain partnerships with global brands such as DecoArt and Duncan Ceramics. The website is professionally designed with good content quality and clear navigation, targeting craft enthusiasts and studios. Technically, the website uses modern web technologies including Odoo CMS, Bootstrap, FontAwesome, and Google Tag Manager for analytics. The site is mobile optimized and performs moderately well. However, there is a lack of visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The cookie consent mechanism is implemented, indicating some level of privacy compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens, but the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. No critical vulnerabilities or adult content were detected. Overall, the security posture is moderate but could be enhanced by adding security headers, privacy policies, and incident response information. The overall risk assessment suggests the business is operational and credible in its niche but should address domain registration transparency and strengthen security and privacy compliance to improve trust and reduce risk exposure.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

SFA (Oxford) is a specialized consulting firm providing bespoke market intelligence and research services focused on critical metals, battery materials, green hydrogen, and fuel cells. The company positions itself as a leading value chain consultancy with a strong track record and a global client base including miners, processors, fabricators, end-users, investors, and recyclers. Their offerings include detailed market reports, consulting solutions, and industry events, supported by a professional and content-rich website. Technically, the website employs modern web technologies including Bootstrap, JavaScript libraries, and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and dedicated security or incident response policies, which are areas for improvement. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and registration transparency, although the website content and business information appear professional and trustworthy. Overall, the website demonstrates a mature digital presence with strong content and marketing practices but could enhance its security posture and transparency regarding domain registration to improve trust and compliance.

R

Red Planet Pictures

redplanetpictures.co.uk

55

Red Planet Pictures is an independent UK-based TV production company specializing in high-end drama, founded in 2006 by Tony Jordan and managed by Belinda Campbell and Alex Jones. The company holds a leading position in the UK drama production market, targeting media professionals and drama audiences. The website reflects a professional media business with clear branding and relevant content focused on their production services. Technically, the site uses modern front-end technologies including JavaScript, YouTube iframe API, and Typekit fonts, with indications of Statamic CMS usage. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is weak due to lack of visible security headers, privacy policies, and incident response information. No WAF or blocking mechanisms are detected, and the domain WHOIS data supports legitimacy with consistent registration and appropriate domain age. Overall, the website is functional and professional but lacks critical privacy and security disclosures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

IHG Hotels & Resorts operates a comprehensive global hospitality platform offering hotel reservations across various brands and property types. The website is professionally designed, localized for German users, and integrates advanced technologies such as Adobe Experience Manager and Adobe Analytics. The presence of structured data and official social media links reinforces the brand's market position as a leading hotel company. Security posture is solid with HTTPS enforced and use of enterprise-grade analytics and monitoring tools, though explicit security headers and policies are not visible in the provided data. Privacy compliance is partial, with no clear privacy or cookie policies detected in the snapshot. Overall, the website demonstrates high professionalism and trustworthiness, but could improve transparency around privacy and security policies.

The website www.forgetmenotonline.org is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or bot protection mechanism, which blocks content access and prevents a full analysis of the site's business and technical details. The lack of WHOIS data due to a malformed request or privacy protection further limits the ability to verify domain registration legitimacy or ownership details. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are available. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site appears to be in a pre-access state, limiting insights into its business model or security posture beyond bot mitigation.

H

Hydrokem Aerosols Limited

hydrokem.co.uk

64

Hydrokem Aerosols Limited is a UK-based manufacturer specializing in aerosol and bag-on-valve products, offering contract manufacturing, product development, and supply chain management services. The company targets diverse sectors including medical, veterinary, personal care, household, and specialized markets, positioning itself as a leading provider with a strong emphasis on quality, compliance, and sustainability. The website reflects a professional and trustworthy business with multiple industry certifications and clear contact information. Technically, the website is built on the Duda platform, leveraging modern web technologies such as JavaScript, Google Tag Manager, and service workers for enhanced performance and user experience. The site is mobile-optimized, fast-loading, and incorporates SEO best practices, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements security headers, and uses cookie consent mechanisms, demonstrating good security hygiene. However, it lacks publicly available security policies and incident response information, which could be improved to enhance transparency and trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The WHOIS data query failure is due to querying the 'www' subdomain instead of the base domain and does not indicate malicious intent. Strategic recommendations include publishing security and incident response policies and establishing a vulnerability disclosure program to further strengthen security posture.

The website www.rowefarming.co.uk is currently inaccessible beyond a basic 404 Page Not Found error page, indicating either the domain is not properly registered or the website is not deployed. The WHOIS lookup confirms the domain is invalid under Nominet UK rules, as it contains too many parts and cannot be registered. Consequently, no business information, contact details, or security policies are available on the site. The technical infrastructure appears minimal with only a single CSS stylesheet linked and no scripts or metadata present. There is no evidence of HTTPS or security headers, which further reduces the security posture. Overall, the site lacks any meaningful content or trust indicators, making it unsuitable for business or customer engagement at this time.

Peak Electromagnetics Ltd is a specialized service provider operating since 2004, focusing on electromagnetic effects including EMC, lightning, EMP, and non-ionising radiation exposure. Their primary market sectors include Commercial, Defence, Aerospace, and Oil industries. The company positions itself as a niche expert offering consulting and testing services tailored to these critical sectors. The website content reflects a professional and consistent brand image, targeting industry professionals and organizations requiring electromagnetic expertise. Technically, the website is built on the HubSpot CMS platform, leveraging common web technologies such as jQuery, Bootstrap, and FontAwesome. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of HubSpot marketing and analytics tools indicates a moderate level of digital maturity, though no advanced frameworks or custom backend technologies are evident. From a security perspective, the site lacks visible security headers and explicit SSL configuration details, which suggests room for improvement in hardening the web presence. No sensitive data exposure or vulnerable libraries were detected, but the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security transparency. The WHOIS data is unavailable due to a domain registration error, which negatively impacts trust and legitimacy assessments. Overall, the website is functional and professional but requires enhancements in privacy compliance, security posture, and transparency to improve trustworthiness and regulatory adherence. Strategic improvements in these areas will strengthen the company's digital presence and stakeholder confidence.

S

Strasse

strasse.co.uk

53

Strasse is a specialized automotive business focused on Porsche vehicles, operating as the North's leading independent Porsche specialist. Their services include expert advice, workshop servicing by Porsche-trained technicians, parts supply, and used Porsche car sales. The company leverages its motorsport background to build trust and credibility among Porsche enthusiasts in the UK. The website is professionally designed with good content quality and clear navigation, targeting Porsche owners and enthusiasts primarily in the North of England. Technically, the website uses modern web technologies including React and Bootstrap, with custom fonts and lightbox libraries enhancing user experience. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or hosting provider details were identified. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and privacy compliance documentation. Security evaluation reveals gaps such as missing privacy and cookie policies, absence of incident response contacts, and no security.txt file. WHOIS data extraction failed due to an invalid query on the 'www.' subdomain, but the domain appears legitimate based on website content and social media presence. Overall, the site is trustworthy but would benefit from enhanced security and compliance measures. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response information, and correcting WHOIS queries for accurate domain data. These steps will improve compliance, security posture, and trustworthiness.

The website www.logic-workshop.co.uk is currently a parked domain page hosted by Hostinger, serving primarily as a placeholder with referral links to Hostinger's web hosting and related services. The site lacks substantive business content, contact information, or policies, indicating it is not actively used for commercial or organizational purposes. The domain WHOIS lookup failed due to domain naming rules violations, suggesting the domain is either invalid or improperly registered, which significantly undermines its legitimacy and trustworthiness. Technically, the site uses standard web technologies including Google Analytics and Google Tag Manager for tracking, and is hosted on Hostinger's DNS system. The design is basic but mobile responsive, with minimal content and no CMS detected. SEO and accessibility features are minimal, and no security headers or HTTPS status information were evident from the provided data. From a security perspective, the site lacks privacy and cookie policies, contact or incident response information, and security best practices such as security headers. The absence of WHOIS data and domain registration irregularities present a critical risk factor. Tracking scripts are present but privacy compliance is poor. Overall, the security posture is weak, and the site should not be considered trustworthy for business or user interactions. Given these factors, the overall risk assessment is high. Strategic recommendations include securing proper domain registration, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

S

Sedus Stoll AG

sedus.co.uk

67

Sedus Stoll AG operates as a leading European manufacturer specializing in modular office furniture and ergonomic chairs, emphasizing products made in Germany. The website presents a professional and well-structured digital presence built on TYPO3 CMS, utilizing modern frontend libraries such as Bootstrap, Owl Carousel, and Swiper to enhance user experience. However, the absence of WHOIS data for the domain www.sedus.com raises concerns about domain registration legitimacy, which should be further investigated to confirm ownership and authenticity. Security posture is moderate, with no evident security headers or explicit privacy and cookie policies, indicating room for improvement in compliance and protection measures. Overall, the website is accessible, content-rich, and targets business professionals and corporate clients seeking ergonomic office solutions.

S

Stewardship

stewardship.org.uk

67

Stewardship is a UK-based Christian non-profit organization focused on helping individuals, churches, and charities manage and maximize their philanthropic giving. The website offers a comprehensive suite of services including giving accounts, donor advised funds, fundraising support, and consultancy. The organization positions itself as a trusted partner in Christian generosity with a strong market presence in the UK non-profit sector. Technically, the website is built on Drupal CMS, leveraging modern analytics and marketing tools such as Google Analytics, Cookiebot, Pardot, and Cloudflare for security and performance. The site is well-structured, mobile-optimized, and provides a rich user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. WHOIS data for the www subdomain was unavailable due to an invalid query, but the main domain stewardship.org.uk is known and legitimate. Overall, the website demonstrates good digital maturity and compliance with privacy regulations, making it a reliable platform for its target audience.

F

Fortuna189

preciousmetalsworkshop.com

48

Fortuna189 is a small-scale astrology and horoscope content provider targeting a general Indonesian audience. The website offers daily horoscope readings and astrology guides, leveraging the Squarespace platform for content delivery. The business model appears to focus on content engagement and possibly product sales related to horoscopes. Technically, the site uses modern web technologies including HTTPS with HSTS, Google Fonts, and JSON-LD structured data for SEO. However, the site lacks comprehensive privacy and cookie policies, contact information, and advanced security headers, which limits its compliance and trustworthiness. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy and registration transparency. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and business credibility to enhance trust and security posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

B

BIG Partnership

bigpartnership.co.uk

60

BIG Partnership is an established, independent integrated communications agency based in the UK, offering a broad range of services including PR, marketing, digital, creative, social media, and public affairs. With over 25 years of experience, the company positions itself as a strategic partner for businesses seeking to enhance brand visibility and impact. The website reflects a professional and modern digital presence, leveraging WordPress CMS, HubSpot marketing and analytics tools, and Google Tag Manager for tracking and consent management. Multimedia content such as videos and client logos enhance engagement and credibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not published. WHOIS data for the domain is unavailable due to an invalid query on the 'www' subdomain, which slightly reduces trust from a domain registration perspective. Overall, the website is well-designed, content-rich, and demonstrates good technical and marketing maturity.

C

Campbell Miller Tools

campbellmillertools.co.uk

62

Campbell Miller Tools operates a professional e-commerce website specializing in power tools and accessories, targeting retailers and professional users primarily in the United Kingdom. The company leverages over 70 years of experience and stocks many leading brand names, positioning itself as a trusted supplier in the UK market. The website is built on the Shopify platform, utilizing a modern theme and integrating multiple analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is robust, with fast performance, mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced, use of hCaptcha for form protection, and cookie consent mechanisms in place. However, explicit privacy and terms of service pages are not clearly found, which could be improved for compliance and transparency. WHOIS data for the www subdomain is unavailable due to naming rules, but this is consistent with it being a subdomain of campbellmillertools.co.uk. Overall, the website presents a professional and trustworthy front with moderate to high legitimacy.

Sciencesoft is a UK-based company specializing in advanced 3D reservoir simulation software tailored for the oil exploration and energy sector. Established in 2000, the company offers a suite of products including the Reservoir Simulation Suite and S3analyse, designed to enhance reservoir engineering productivity and decision-making. Their market position is that of a niche software provider with a focus on chemical enhanced oil recovery and reservoir simulation post-processing. The website demonstrates moderate digital maturity, employing modern web technologies such as React and service workers, hosted via GoDaddy's platform and WSImg CDN. However, the site lacks comprehensive privacy and cookie policies, which indicates compliance gaps with GDPR and related regulations. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and enabling DNSSEC. Contact information is limited to a UK phone number and a Twitter social media link, with no company emails or physical addresses disclosed. Overall, the website is professional and trustworthy but would benefit from enhanced privacy, security, and compliance features.

C

Clearcoat North West Ltd

clearcoatnw.co.uk

55

Clearcoat North West Ltd is a small, established spray painting service provider based in Manchester, UK, specializing in wooden furniture and kitchen resprays. Founded in 2002, the company positions itself as a leading local service with a focus on quality finishes and customer satisfaction. The website reflects a professional business with clear contact details and a regional target audience in the North West of England. Technically, the site is built on the Multiscreensite platform, leveraging modern JavaScript libraries and CDN hosting, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. The absence of WHOIS data due to domain naming issues introduces some uncertainty about domain legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site presents a credible and professional front for the business with room for improvement in security transparency and domain registration clarity.

A

allslot888

vector-consultants.com

48

The website allslot888 presents itself as a Thai online gambling platform specializing in slot games, offering direct access without intermediaries. It targets Thai-speaking users interested in online slots and gambling, providing a variety of games, promotions, and automated financial transactions. The site is built on a modern WordPress infrastructure with Elementor and PWA capabilities, optimized for mobile devices and good SEO performance. However, the absence of WHOIS registration data for the domain raises concerns about the legitimacy and trustworthiness of the domain ownership. The site claims licensing from recognized gaming authorities and holds certifications that enhance its credibility within the gambling industry. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. Contact information is comprehensive and well-structured, supporting customer service and technical support in Thai and English. Overall, the site is functional and professional in design but requires improvements in transparency, security policies, and domain registration verification to enhance trust and compliance.

L

Line Group Limited

linegrouplimited.com

51

Line Group Limited is a Gibraltar-based fiduciary services provider specializing in international fiduciary, company management, trust, accounting, and corporate banking services. Established in 2012, the company serves a global clientele with a strong local presence and a team of approximately 70 professionals. Their website reflects a professional and comprehensive presentation of their services and team, targeting clients seeking wealth management, trust services, and corporate solutions in Gibraltar. The business model focuses on providing tailored fiduciary and corporate services with a strong emphasis on trust and compliance. Technically, the website is built on WordPress with modern JavaScript frameworks including Vue.js, Alpine.js, and jQuery, complemented by SEO optimization through Yoast. The site uses Google Analytics and Passle for content marketing and analytics. Hosting appears to be managed via GoDaddy, consistent with the domain registrar. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a trustworthy and professional image with solid business credibility and technical implementation. Security posture is adequate but could be enhanced by enabling DNSSEC and adding security headers and policies. The domain registration data supports the legitimacy of the business. Strategic recommendations include improving DNS security, publishing security policies, and ongoing monitoring of third-party scripts.

M

Michael Grubb Studio

michaelgrubbstudio.com

56

Michael Grubb Studio is a specialized lighting design consultancy recognized for multiple awards and operating primarily in the UK with international projects. The company offers expert lighting design services across interior, exterior, and masterplanning sectors, targeting architects, developers, and clients seeking professional lighting solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern SEO and analytics tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website's professional presentation supports legitimacy. Overall, the site is a credible digital presence for a small consultancy but would benefit from enhanced privacy compliance and security transparency.

Tarquin's Cornish Gin is a UK-based premium spirits producer specializing in handcrafted gin made in small batches on the north Cornwall coast. The company has achieved international recognition, including winning the World's Best Gin award at the San Francisco World Spirits Competition. The website operates as an e-commerce platform built on Shopify, offering direct online sales to consumers with international shipping capabilities. The digital infrastructure leverages modern marketing and analytics tools such as Klaviyo, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and age verification implemented, but could benefit from enhanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but lacking explicit privacy and terms of service pages. Overall, the website presents a professional and trustworthy front for a small but established business in the premium alcohol e-commerce sector.

The website www.careandrepair-manchester.org.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. Due to this, no meaningful business content, contact information, or policies are accessible for analysis. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain is either invalid or improperly registered. This severely impacts the trustworthiness and legitimacy of the domain. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible HTTPS enforcement and security headers in the provided data. Privacy and cookie policies are absent, and no contact or social media information is found. Overall, the site appears non-functional or intentionally blocked, limiting any comprehensive security or business analysis.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.